CVE-2016-5582: Critical severity oracle java se 7 vulnerability
It was discovered that the Hotspot component of OpenJDK did not check types of System.arraycopy() function arguments src and dest in certain cases. An untrusted Java application or applet could use this flaw to corrupt virtual machine's memory and bypass Java sandbox restrictions.
Other sources
Unspecified vulnerability in Oracle Java SE 6u121, 7u111, 8u102; and Java SE Embedded 8u101 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Hotspot, a different vulnerability than CVE-2016-5573.
— MITRE
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2016-5582?
CVE-2016-5582 has a severity rating of high due to the potential for memory corruption and exploitation.
How do I fix CVE-2016-5582?
To fix CVE-2016-5582, users should update to the latest versions of Oracle JDK and JRE that address this vulnerability.
Which versions of JDK are affected by CVE-2016-5582?
CVE-2016-5582 affects Oracle JDK versions 1.6.0-update121, 1.7.0-update111, and 1.8.0-update101 and 1.8.0-update102.
Can CVE-2016-5582 be exploited remotely?
Yes, CVE-2016-5582 can be exploited remotely through an untrusted Java application or applet.
What are the potential consequences of exploiting CVE-2016-5582?
Exploiting CVE-2016-5582 could lead to memory corruption and allow attackers to bypass Java sandbox restrictions.